← Database

CVE-2025-25364

HIGH CVSS: 8.4 Published: 2025-12-23 Modified: 2026-06-17

Description

A command injection vulnerability in the me.connectify.SMJobBlessHelper XPC service of Speedify VPN up to v15.0.0 allows attackers to execute arbitrary commands with root-level privileges.

Affected Platforms

Connectify Speedify

Weakness Type

CWE-77

References